The Ministry for Digital Transformation has launched new regulations to strengthen security in telecommunications and combat phone scams. Starting from June 7, 2024, Spanish operators will be required to block calls and SMS messages originating from abroad that use spoofed national numbers.
This initiative aims to eradicate CLI spoofing, a fraudulent technique used by cybercriminals to impersonate banks, public administrations, and companies. Through this deception, scammers manipulate the caller ID (CLI) so that it appears the communication is coming from a legitimate entity, increasing the likelihood of success in their fraud attempts.
The impact of CLI spoofing on users and businesses
The fraudulent use of Spanish numbers affects not only consumers but also businesses and public organizations. Criminals use fake numbers to send SMS messages that appear in the same conversation as legitimate messages from banks and service companies, thereby facilitating identity theft.
According to industry data, thousands of users have fallen victim to scams like phone phishing, where cybercriminals obtain banking information or personal data under the guise of a trusted call.
To combat this issue, the new regulations establish two key measures:
- Blocking calls and SMS from nonexistent or manipulated numbers.
- Prohibition of international calls using a Spanish number, except in justified cases.
How the new restrictions will be applied
Operators will be required to perform stricter controls on the calls and SMS messages that pass through their networks.
- Verification of the originating number: Operators will block any call or SMS that uses a number not registered in the National Telephone Numbering Plan.
- Calls from abroad using Spanish numbers: Companies will have to automatically reject these calls, except in cases where it involves users in international roaming.
- Commercial SMS messages: Companies will need to register their alphanumeric identifiers with the CNMC (National Commission for Markets and Competition). Any message not registered will be blocked.
Exceptions and questions regarding implementation
While the regulation is clear about eliminating spoofed numbers, it also outlines exceptions in specific cases:
- Spanish users abroad: International calls will be allowed if the line belongs to a user roaming.
- International call centers: Spanish companies with call centers in other countries may request special authorization to continue operating with national numbers.
- Cases of questionable identification: In situations where it cannot be confirmed whether a number is legitimate, the call may be marked as “unverified origin” in the operator’s system.
Restrictions on commercial calls
In addition to blocking fraudulent calls, the government has tightened restrictions on commercial calls. Starting from June 2024, companies will not be able to use mobile numbers for advertising campaigns or customer service.
The only permitted options will be:
- Geographic fixed numbers (provincial prefixes).
- Free numbers (800 and 900).
This measure aims to increase transparency and reduce phone spam, which remains one of the main complaints from consumers.
Implementation deadlines
Operators will have three months to adapt their systems to the new regulations. Key dates are:
- March 7, 2024: Operators may begin to voluntarily block fraudulent calls.
- June 7, 2024: The mandatory blocking of calls and SMS from abroad using fake numbers will take effect. The use of mobile numbers in commercial calls will also be prohibited.
- June 7, 2026: It will be required that all commercial SMS use registered identifiers with the CNMC.
Spain follows the trend of other European countries
The Spanish initiative follows the lead of France, Germany, and the United Kingdom, which have implemented similar regulations to combat phone fraud. The effectiveness of these measures will depend on the level of compliance by operators and the ability of cybercriminals to adapt to the new restrictions.
The ultimate goal is to restore trust in telecommunications, protecting both consumers and businesses from the growing threat of phone fraud.
via: BOE